Most recent entries from all

bdu:2020-00070

certfr-2022-avi-570 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2022-avi-570

Withdrawn: CLEANSTART-2026-KU61465 — Security fixes for CVE-2015-3254, CVE-2018-10237, CVE-2018-11798, CVE-2018-1320, CVE-2018-20200, CVE-2019-0205, CVE-202…

Withdrawn by the publisher.

Affected: CleanStart: stargate

Multiple security vulnerabilities affect the stargate package. These issues are resolved in later releases. See references for individual vulnerability details.

cnvd-2019-41287

EUVD-2026-48385

fkie_cve-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.

GHSA-rj7p-rfgp-852x — Loop with Unreachable Exit Condition in Apache Thrift

Affected: Maven: org.apache.thrift:libthrift

gsd-2019-0205

msrc_CVE-2019-0205 — In Apache Thrift all versions up to and including 0.12.0 a server or client may run into an endless loop when feed with…

msrc_CVE-2019-0205

OESA-2021-1017 — thrift security update

Affected: openEuler:20.03-LTS-SP1: thrift

The Apache Thrift software framework for cross-language services development combines a software stack with a code generation engine to build services that work efficiently and seamlessly between C++, Java, Python, and other languages.\r\n\r\n Security Fix(es):\r\n\r\n In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.(CVE-2019-0205)\r\n\r\n In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.(CVE-2019-0210)\r\n\r\n

RHSA-2020:0804 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 6 security update

thrift: Endless loop when feed with specific input data thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use netty: HTTP request smuggling netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling

Withdrawn: UBUNTU-CVE-2019-0205

Withdrawn by the publisher.

Affected: Ubuntu:20.04:LTS: thrift

WID-SEC-W-2023-0723 — IBM Integration Bus: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Integration Bus ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Denial of Service Zustand herzustellen.